apiVersion: postgresql.cnpg.io/v1
kind: Cluster
metadata:
  name: vaultwarden-db
  namespace: vaultwarden

spec:
  instances: 2

  storage: 
    size: 1Gi
    storageClass: redundant-storage-class

  bootstrap:
    initdb:
      database: vaultwarden
      owner: vaultwarden
      secret:
        name: vaultwarden-db

  postgresql:
    pg_hba:
      - host all all all md5

  resources:
    requests:
      cpu: 100m
      memory: 100Mi
    limits:
      cpu: 500m
      memory: 500Mi

  backup:
    barmanObjectStore:
      destinationPath: s3://cluster-example-full-backup
      endpointURL: http://10.10.0.32:9000
      s3Credentials:
        accessKeyId:
          name: backup-creds
          key: ACCESS_KEY_ID
        secretAccessKey:
          name: backup-creds
          key: ACCESS_SECRET_KEY
        region:
          name: backup-creds
          key: REGION
      wal:
        compression: gzip
      data:
        compression: gzip
        jobs: 2
    retentionPolicy: "30d"